{ "ok": true, "slug": "hsbc.com-2026-04-03", "stats": { "subs": 3675, "all": 3675, "resolved": 1247, "live": 840, "takeover": 93, "juicy": 93, "nuclei": 0, "subjack": 0, "subjack_vuln": 0, "takeover_v4": 0, "takeover_hot_claim": 0, "takeover_claimed": 0, "takeover_telegram_ok": 0, "confirmed": false, "alert": true, "scan_log": true }, "path": "\/www\/wwwroot\/tooldomain\/output\/hsbc.com-2026-04-03", "takeover_candidates": [ "api-dev.dms.gbm.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mde0qxdaj3paax.cloudfront.net\u001b[0m]", "api.dms.gbm.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1bl5h2qr88orr.cloudfront.net\u001b[0m]", "brokerage-ao.us.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2tnykpfridi6h.cloudfront.net\u001b[0m]", "cert.connectedmoney.api.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md27gunp962zvd3.cloudfront.net\u001b[0m]", "ci.connectedmoney.api.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md219er5huhf56b.cloudfront.net\u001b[0m]", "cio.privatebanking.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mhsbc-pbpws-prod-878825460.eu-west-2.elb.amazonaws.com\u001b[0m]", "connectedmoney.api.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3d4u8ieq4fwf6.cloudfront.net\u001b[0m]", "dco-ao-dev.expat.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2sdvbsj4w99ne.cloudfront.net\u001b[0m]", "dco-ao-ntb.us.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdi6y7cb0tkbww.cloudfront.net\u001b[0m]", "dco-ao-stg.expat.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md5jr3yykzrce5.cloudfront.net\u001b[0m]", "dco-ao-uat.expat.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3t2xyi2rkhkkt.cloudfront.net\u001b[0m]", "dco-ao.expat.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3n3m6qvx1tpi1.cloudfront.net\u001b[0m]", "dco-ao.us.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdtnik9j4a9hdm.cloudfront.net\u001b[0m]", "dco-cc.us.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2xf84o1bgbzb0.cloudfront.net\u001b[0m]", "dco-form-cc-uat.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md117pmnmvz5ysr.cloudfront.net\u001b[0m]", "dco-form-cc.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdfqctgub5b5mh.cloudfront.net\u001b[0m]", "dco-form-ccla-uat.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2xvne4dwh8pam.cloudfront.net\u001b[0m]", "dco-form-ccla.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3ujlrqu5dw4k9.cloudfront.net\u001b[0m]", "dco-form-cref-uat.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mda5v6u62cjxiz.cloudfront.net\u001b[0m]", "dco-form-cref.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md18ngnuvp0rkwh.cloudfront.net\u001b[0m]", "dco-form-cus-uat.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1zdzvsfmg4wb9.cloudfront.net\u001b[0m]", "dco-form-cus.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3vlujlrnizczz.cloudfront.net\u001b[0m]", "dco-form-loans-uat.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2iy3424ffbt10.cloudfront.net\u001b[0m]", "dco-form-loans.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md28wjjham3dkdd.cloudfront.net\u001b[0m]", "dco-form-plg.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2dm6c40ypp8wr.cloudfront.net\u001b[0m]", "gateway.ci.connectedmoney.api.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mrxlxdv4v82.execute-api.eu-west-1.amazonaws.com\u001b[0m]", "gateway.connectedmoney.api.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgze03ry8g8.execute-api.eu-west-1.amazonaws.com\u001b[0m]", "gtff2.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdsvs5gopkucvl.cloudfront.net\u001b[0m]", "ico-ao-sit.us.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdz3c3b9pateip.cloudfront.net\u001b[0m]", "ico-ao-uat.us.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3c36n5m1ft3h6.cloudfront.net\u001b[0m]", "ico-ao.us.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2em929ut8akvh.cloudfront.net\u001b[0m]", "inclusion.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mhsbc-elearning-prod-1023874295.eu-west-2.elb.amazonaws.com\u001b[0m]", "indices.gbm.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mnginx-alb-prod-618673590.eu-west-1.elb.amazonaws.com\u001b[0m]", "insightshub.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md199flewtfqk6m.cloudfront.net\u001b[0m]", "internal.openbanking.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-fbe58fttl7.execute-api.eu-west-1.amazonaws.com\u001b[0m]", "intl-credit-report-dev.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3f2cotovn7o1n.cloudfront.net\u001b[0m]", "intl-credit-report-preprod.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md334eljxp7i1i5.cloudfront.net\u001b[0m]", "intl-credit-report.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3ugan7j3gqtz9.cloudfront.net\u001b[0m]", "investments.ae.personal-banking.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2m86ta0lhgrk5.cloudfront.net\u001b[0m]", "investments.ciiom.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdlsgl5gx05o9n.cloudfront.net\u001b[0m]", "investments.expat.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdj5xvfqfygvyv.cloudfront.net\u001b[0m]", "investments4.personal-banking.us.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2elc0qk0k0h1x.cloudfront.net\u001b[0m]", "investments4.tw.personal-banking.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2zerihfw0qe6t.cloudfront.net\u001b[0m]", "jade-cus-lp.dco-form.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md11n81y1yk3xfi.cloudfront.net\u001b[0m]", "jade-cus-uat.dco-form.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdpq6h0zpkp15y.cloudfront.net\u001b[0m]", "jade-cus.dco-form.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md14uqoqrymj4ij.cloudfront.net\u001b[0m]", "lp.dco-form-cc.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1z8e7l2lm67fi.cloudfront.net\u001b[0m]", "lp.dco-form-ccla.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2o41ldq4dopo2.cloudfront.net\u001b[0m]", "lp.dco-form-cref.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdx6e9tna3b1by.cloudfront.net\u001b[0m]", "lp.dco-form-cus.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3q7fcv2uafrra.cloudfront.net\u001b[0m]", "lp.dco-form-loans.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md9nlfd4894f7x.cloudfront.net\u001b[0m]", "lp.dco-form-plg.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2e384y71zd5up.cloudfront.net\u001b[0m]", "m.dev.mobile15.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1bvrzb7nyv7bp.cloudfront.net\u001b[0m]", "m.mobile15.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1eta2odot6grh.cloudfront.net\u001b[0m]", "messaging-sit.privatebanking.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdl85qk8nkchh9.cloudfront.net\u001b[0m]", "messaging-uat.privatebanking.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2ajq4zy7fx3ns.cloudfront.net\u001b[0m]", "messaging.privatebanking.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3e13o2r36qdzg.cloudfront.net\u001b[0m]", "pentest.connectedmoney.api.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2w6zr194fdl4v.cloudfront.net\u001b[0m]", "perftest.connectedmoney.api.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mde6scv1jctfpk.cloudfront.net\u001b[0m]", "ple-investments.uk.personal-banking.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md11vfllmnuyokx.cloudfront.net\u001b[0m]", "portal-dev.dms.gbm.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3t3pybadyh6o8.cloudfront.net\u001b[0m]", "portal.dms.gbm.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2ntphmz43zz42.cloudfront.net\u001b[0m]", "preprod.connectedmoney.api.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2nybyv5xb84o3.cloudfront.net\u001b[0m]", "privatebanking.expat.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdvsefv8qxpil8.cloudfront.net\u001b[0m]", "privatebanking.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mhsbc-pbpws-prod-878825460.eu-west-2.elb.amazonaws.com\u001b[0m]", "privatebanking.us.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdvsefv8qxpil8.cloudfront.net\u001b[0m]", "qa.connectedmoney.api.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdk2emfadk5522.cloudfront.net\u001b[0m]", "research.privatebank.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mhsbc-pbpws-prod-878825460.eu-west-2.elb.amazonaws.com\u001b[0m]", "research.privatebanking.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mhsbc-pbpws-prod-878825460.eu-west-2.elb.amazonaws.com\u001b[0m]", "sit.hotfix.privatebanking.expat.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdhvaf6lb051z.cloudfront.net\u001b[0m]", "sit.hotfix.privatebanking.us.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdhvaf6lb051z.cloudfront.net\u001b[0m]", "sit.market.privatebanking.expat.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdhvaf6lb051z.cloudfront.net\u001b[0m]", "sit.market.privatebanking.us.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdhvaf6lb051z.cloudfront.net\u001b[0m]", "staff-appointment-uat.us.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1lvoxp8e2opow.cloudfront.net\u001b[0m]", "staff-appointment.us.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdfszuxpqzi84i.cloudfront.net\u001b[0m]", "uat.hotfix.privatebanking.expat.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdoq3pdhagfaan.cloudfront.net\u001b[0m]", "uat.hotfix.privatebanking.us.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdoq3pdhagfaan.cloudfront.net\u001b[0m]", "uat.market.privatebanking.expat.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdoq3pdhagfaan.cloudfront.net\u001b[0m]", "uat.market.privatebanking.us.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdoq3pdhagfaan.cloudfront.net\u001b[0m]", "user-manager.connectedmoney.api.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32muser-manager-external-elb-1609288884.eu-west-1.elb.amazonaws.com\u001b[0m]", "www.api-dev.dms.gbm.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mde0qxdaj3paax.cloudfront.net\u001b[0m]", "www.api.dms.gbm.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1bl5h2qr88orr.cloudfront.net\u001b[0m]", "www.appointment-uat.us.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md19dlp8f9xanqq.cloudfront.net\u001b[0m]", "www.inclusion.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mhsbc-elearning-prod-1023874295.eu-west-2.elb.amazonaws.com\u001b[0m]", "www.insightshub.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md199flewtfqk6m.cloudfront.net\u001b[0m]", "www.portal-dev.dms.gbm.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3t3pybadyh6o8.cloudfront.net\u001b[0m]", "www.portal.dms.gbm.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2ntphmz43zz42.cloudfront.net\u001b[0m]", "www.privatebanking.expat.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdvsefv8qxpil8.cloudfront.net\u001b[0m]", "www.privatebanking.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mhsbc-pbpws-prod-878825460.eu-west-2.elb.amazonaws.com\u001b[0m]", "www.privatebanking.us.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdvsefv8qxpil8.cloudfront.net\u001b[0m]", "www.research.privatebank.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mhsbc-pbpws-prod-878825460.eu-west-2.elb.amazonaws.com\u001b[0m]", "www.research.privatebanking.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mhsbc-pbpws-prod-878825460.eu-west-2.elb.amazonaws.com\u001b[0m]", "yodlee-service.connectedmoney.api.hsbc.com [\u001b[35mCNAME\u001b[0m] [\u001b[32myodlee-service-external-elb-1381445503.eu-west-1.elb.amazonaws.com\u001b[0m]" ], "takeover_v4": { "domain": "hsbc.com", "version": 4, "generated_at": "2026-04-02T20:48:58.036Z", "ai_filter": { "engine": "rules_scorer_v1", "min_score": 48, "llm_pool_min": 38, "evaluated": 8, "kept_strict": 0, "llm_review_pool": 0, "dropped_noise": 8, "deep_skipped_below_pool": 8 }, "candidates": [], "llm_review_pool": [] } }